search

sonatype / ossindex-public

Sonatype OSS Index - Public
Apache License 2.0
6 stars 9 forks source link

oss index unexpected response; status 500 #43

Open rk7373 opened 1 year ago

rk7373 commented 1 year ago

Since Jan 13 2023 we have been errors on dependency-check when building packages We are using maven plugin 3.6.2 and dependency check plugin 8.0.0

Caused by: org.sonatype.ossindex.service.client.transport.Transport$TransportException: Unexpected response; status: 500

example 1 [WARNING] An error occurred while analyzing '.../.m2/repository/javax/ejb/javax.ejb-api/3.2.2/javax.ejb-api-3.2.2.jar' (Sonatype OSS Index Analyzer). [ERROR] Failed to execute goal org.owasp:dependency-check-maven:5.3.0:aggregate (default-cli) on project {appname}-parent: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during analysis: [ERROR] Failed to request component-reports

example 2 [WARNING] An error occurred while analyzing '.../.m2/repository/ch/qos/logback/logback-classic/1.2.3/logback-classic-1.2.3.jar' (Sonatype OSS Index Analyzer) [ERROR] Failed to execute goal org.owasp:dependency-check-maven:5.3.0:aggregate (default-cli) on project {appname}-parent: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during analysis: [ERROR] Failed to request component-reports

Narrowed it down to two packages listed in ossindex but not available on maven, 404 not found

https://ossindex.sonatype.org/search?type=maven&q=org.jboss.cache https://repo1.maven.org/maven2/org/jboss/cache/jbosscache-core/

https://ossindex.sonatype.org/component/pkg:maven/net.sf.ehcache/sizeof-agent https://repo1.maven.org/maven2/net/sf/ehcache/sizeof-agent/